AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A method of controlling transfer of health information 
along a network pathway, the method comprising: 

receiving, by an access server on the network pathway, a request for the health 
information from across an internal network, the request being generated 
from a portable healthcare device on the network pathway; 

immediately determining, by the access server, if a corresponding consent is 

stored in the access server and whether the consent satisfies requirements 
for release of the health information, wherein the consent is for a requestor 
of the health information to access the health information and the consent 
is provided by an owner of the health information, wherein the consent is 
based on results provided by a filtering component, the filtering 
component to filter the health information based on the request such that 
an unnecessary portion of the health information is filtered out, wherein 
the request includes an intended use of the health information, wherein the 
intended use of hc.sS'J^ - ^ '^s •lu- j.'xsi.'^vi is .i to detemiine 
4>i^-ei^-a*^i=&-i34--appropriateness of the consent;- or requirements for the 
consent, wherein a purpose field is provided to specify intended reasons 
for which the health information is accessed ie-according to the consent; 
and 

if the corresponding consent is stored, permitting, by the access server, the health 
information to be immediately acquired by sending the request across an 
external network to a remote site, receiving the health information from 
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the remote site, and forwarding the health information back across the 
intemal network. 



2. (Original) The method of claim 1, wherein the forwarding of the health 
information is to the portable healthcare device. 

3. (Original) The method of claim 1, wherein if no corresponding consent is stored, 
further including sending a notice to the portable healthcare device. 

4. (Previously Presented) The method of claim 3, further including receiving, by the 
access server, the appropriate consent from the portable healthcare device and 
permitting the health information to be immediately acquired by sending the 
request across an external network to a remote site, receiving the health 
information from the remote site, and forwarding the health information back 
across the intemal network. 

5. (Original) The method of claim 4, wherein the corresponding consent is 
fingerprint data, retinal data, voice data, or a digital signature data and further 
including comparing the corresponding consent with stored consent data. 

6. (Original) The method of claim 1, further including determining if consent is 
required prior to the determining if a corresponding consent is stored, and if the 
consent is not required, permitting the health information to be inmiediately 
acquired by sending the request across an external network to a remote site, 
receiving the health information from the remote site, and forwarding the health 
information back across the intemal network. 
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7. (Original) The method of claim 1, wherein the remote site is a pharmacy benefit 

manager. 

8. (Previously Presented) The method of claim 1, further including determining, by 
the access server, the suitability of a corresponding consent. 

9. (Previously Presented) The method of claim 1, further including placing, by an 
interface, the request in a wrapper for acceptance by a next segment in the 
network pathway towards the remote site. 

10. (Previously Presented) The method of claim 9, further including unwrapping, by 
the interface, the health information received from across the external network. 

1 1 . (Currently Amended) A system comprising: 

a server computer system having a processor and a storage medium coupled with 
the processor, the server computer system further having an internal 
network port, a server interface, and a consent processing system, the 
consent processing system having a consent database and a search engine 
coupled with the consent database, the server computer system having 

the internal network port to receive a request for health information from a 

portable healthcare device, the request issued by a user of the portable 
healthcare device; 

the consent database to store consents corresponding to health information; 

the search engine to determine if a corresponding consent is stored in the database 

for the requested health information and, if the corresponding consent 

exists, whether it satisfies requirements for release of the health 

information, wherein the consent is for the user to access the health 
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information and the consent is provided by an owner of the health 
information, wherein the consent is based on results provided by a filtering 
component, the filtering component to filter the health information based 
on the request such that an unnecessary portion of the health information 
is filtered out, wherein the request includes an intended use of the health 
information, wherein the intended use of the health infoiim tion of the 
r.?aVMt:.is..y.sed to determine <^te"Of -B^K»x=e ef appropriateness of the consent^ 
ai?d_gr requirements for the consent, wherein a purpose field is provided to 
specify intended reasons for which the health information is accessed in 
according to the consent; and 
the server interface to prepare the request for receipt by a next segment in the 
network pathway towards a remote site, and to prepare the health 
information sent in response from the remote site to be received by a next 
segment in the network pathway towards the user. 

12. (Previously Presented) The system of claim 11, further including a consent 
analysis unit to determine the suitability of a corresponding consent. 

13. (Previously Presented) The system of claim 11, further including a request 
identification unit to determine the appropriate remote site to receive the request. 

14. (Previously Presented) The system of claim 11, further including a health 
information identification unit to determine what type of information is received. 

15. (Previously Presented) The system of claim 11, further including an application 

unit to determine an appropriate software application program for the health 

information to be entered into. 
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16. (Currently Amended) A machine-readable medium comprising instructions 
which, when executed, cause a machine to: 

process a request for the health information received from across an internal 

network, the request being generated from a portable healthcare device on 
the internal network; 

immediately determine, by an access server on the internal network, if an 

corresponding consent is stored in the access server and whether the 
consent satisfies requirements for release of the health information, 
wherein the consent is for a requestor of the health information to access 
the health information and the consent is provided by an owner of the 
health information, wherein the consent is based on results provided by a 
filtering component, the filtering component to filter the health 
information based on the request such that an unnecessary portion of the 
health information is filtered out, wherein the request includes an intended 
use of the health information, wherein the intended use of tlie health 

. V V ^vos. IS V Mo determine ^-^-^ ^^-.^ ^h--*- 

appropriateness of the consent?-aBd or requirements for the consent, 
wherein a purpose field is provided to specify intended reasons for which 
the health information is accessed in according to the consent; and 

if the corresponding consent is stored, permit the health information to be 

immediately acquired by sending the request across an external network to 
a remote site, receiving the health information from the remote site, and 
forwarding the health information back across the internal network. 
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17. (Previously Presented) The machine-readable medium of claim 16, wherein the 
forwarding of the health information is to the portable healthcare device. 

18. (Previously Presented) The machine-readable medium of claim 16, if no 
corresponding consent is stored, further including additional instructions which 
when executed further cause the machine to send a notice to the portable 
healthcare device. 

19. (Previously Presented) The machine-readable medium of claim 18, if no 
corresponding consent is stored, further including additional instructions which 
when executed further cause the machine to receive the appropriate consent from 
the portable healthcare device and to permit the health information to be 
immediately acquired by sending the request across an external network to a 
remote site, receiving the health information from the remote site, and forwarding 
the health information back across the internal network. 

20. (Previously Presented) The machine-readable medium of claim 19, wherein the 
corresponding consent is fingerprint data, retinal data, voice data, or a digital 
signature data and further including comparing the corresponding consent with 
stored consent data. 

21 . (Previously Presented) The machine-readable medium of claim 16, further 
including additional instructions which when executed further cause the machine 
to determine if consent is required and if the consent is not required, to permit the 

health information to be immediately acquired by sending the request across an 
external network to a remote site, receiving the health information from the 
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remote site, and forwarding the health information back across the internal 

network. 

22. (Previously Presented) The machine-readable medium of claim 16, further 
including additional instructions which when executed further cause the machine 
to determine the suitability of a corresponding consent. 

23. (Previously Presented) The machine-readable medium of claim 16, further 

including additional instmctions which when executed further cause the machine 
to placing the request in a wrapper for acceptance by a next segment in the 
network pathway towards the remote site. 

24. (Previously Presented) The machine-readable medium of claim 23, further 
including additional instructions which when executed further cause the machine 
to interrupt a processor to unwrap health information received from across and 
external network. 

25. -27. (Canceled) 
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